Arbitrary Code Execution Vulnerability in Substance3D Painter Could Lead to User Data Theft

CVE-2024-53957

What is CVE-2024-53957?

Substance3D Painter versions 10.1.1 and earlier are vulnerable to a Heap-based Buffer Overflow that can lead to arbitrary code execution within the context of the user currently logged in. This vulnerability poses a significant risk when a user interacts with malicious files. Successful exploitation requires the victim to open a specially crafted file, allowing the attacker to execute arbitrary code on the system, potentially compromising the integrity and confidentiality of the user's data.

References